OpenVPN on your QNAP
ฝัง
- เผยแพร่เมื่อ 8 ก.ค. 2024
- Using your QNAP to setup and private VPN.
==============
Affiliate Links
==============
Qnap TVS-951x NAS: amzn.to/2RtEfaX
Qnap TS-453B NAS: amzn.to/2JD9Q7D
Qnap 12 Port unmanaged 10Gbe switch: amzn.to/2QhsDYF
Qnap 10Gbe NIC card: amzn.to/2JzaySY
QNAP TR-004 Expansion: amzn.to/2LGBiSK
#openvpn, #QNAP, #QVPN, #qnap openvpn, #VPN - วิทยาศาสตร์และเทคโนโลยี
![[안방1열 직캠4K] 베이비몬스터 치키타 'FOREVER' (BABYMONSTER CHIQUITA FanCam) @SBS Inkigayo 2404707](http://i.ytimg.com/vi/Tn3bGHiBWkg/mqdefault.jpg)
![[FULL EP.14] เซียนหรั่ง สอน มาร์ชจุ จับปูนา ฮากระจาย | เฮ็ดอย่างเซียนหรั่ง | One Playground](http://i.ytimg.com/vi/M8mPjd_T2lo/mqdefault.jpg)
This is a blast from the past for me. Just got a TS-431P for backup and was poking around for info and here you were. Used to listen to you on podcasts while commuting between New Orleans and Houston after Katrina. I eventually built a Home Server (still running after 6+ years) relying on info from you and the other guys on the podcasts. Hope you are doing well.
That's awesome. Great to hear from you. It has been a while since the podcast but I do miss it. I almost started it back a couple of times but decided to go the TH-cam route instead. Great to hear from you.
Thanks a million. Very good explanation. My first VPN - and I am native german speaker. It works!!!
Awesome news. Good luck with it and thanks for the feedback.
Hello ... Great video No crap just the essential and a few pieces of great background info ... I will set up OpenVpn on my Nas tomorrow
Awesome. Glad you like it. Good luck.
Brilliant explanation! Thank you!
Great to hear and thanks for the feedback!
It was very helpfull for me! Than`x alot!
Glad you enjoyed it. Thanks for the feedback.
Thanks. That was very useful
Thank you!
Hi there Mike, thanks for the great video. i wanted to ask, do you have to have active directory for this to work? or can you manually add users to the Qnap for remote VPN access?
No active directory required at all. You setup your own users. Great question. Thanks
Excellent step by step instructions.
Glad it was helpful! Thanks for the feedback.
Hey Mike - This video was very timely and really helped me out, thank you. One suggestions for follow up - how to use a third party VPN like PIA via open VPN to connect to the NAS. Again, thank you !
Thanks for the feedback and I will do one in the near future.
Hi Mike Denmark here.. I second that , A video on how to use a third party, would be great, I use Nordvpn, but can not get it to work Keep up the good work Regards Jim denmark :O)
Hello Mike, I third that third party VPN tutorial. Thanks for all your videos. I have learned so much about my NAS watching your channel.
I cannot do everything just as you said, but when I click connect, it doesn’t connect. At best, in Tunnelblick I ger a TLS Error. I am running Mac OSX + QNAP TS-231p + HUMAX HGB10R-02. I already forwarded all the VPN ports.
Without knowing more about how you configured it, this is a hard question to respond to. I have tested this on the MAC so I know it can work. Are you trying this inside or outside your network? You should only test when you are outside your network. Which port did you forward?
Hi Mike, why do you use OpenVPN app on the end device instead of the native QVPN app? Is there some added value to the OpenVPN or some problems with the QVPN?
Great question. No reason other than the OpenVPN app was out first. Both work well but I think the OpenVPN is a little faster and more efficient at the cost of a couple of features.
Great video Mike! Installed Open VPN as well as L2TP on my iMac and everything is working great and also have QBELT installed which gives me way better Internet Speed Tests with Black Magic. Is QBELT better and the latest and greatest and more secure and a better option, or am I missing something? Will be using my iPhone as well. Thanks, Jeff
Great to hear and thanks for the feedback.
@@MikeFaucher Hey Mike! You didn't answer my question :-) Is QBELT the better option now over Open VPN?
Hi Mike, one question, the certificate is included in the Configuration file.onvpn?
Yes, for each user.
Hi Mike, I am new to NAS tech, and got a colleague from work who gave me a NAS for a few bucks, Qnap ts-239 pro II +, it's quite an old model after doing some research and was able to set it up. Planning to use it for backup important data in RAID 1 with 2 TB (Seagate Baracuda HHDs), I disabled most of the services that I think can cause vulnerabilities like web service, DNLS, FTP, etc. after trying to follow along in your tutorial, also did the port forwarding on my router, I can't really tell if the VPN is working yet, I tried to test it out on my android phone but it does not seem to work.
After retiring a couple of times I feel like I might have disabled a service that needs to run in order for the VPN to work on the NAS? for some reason I ran into some other issues installing the client on my W10 PC telling me that the open VPN haning on creating tun/tap adapters not sure why but now I'm attempting to do it on a VM to see if the client is going to work.
your help is much appreciated!
Just wanted to point out that the VPN can only be tested when you are not on your network or wifi otherwise it will not connect. You have to away from you home to see if it is working. Not sure which services you disabled but for reference I have another video on that as well for security. Did you get the windows client from openvpn.net/community-downloads/). Without seeing you entire configuration, it is hard to tell where the issues can be. Not sure if that helped but good luck.
Hi Mike, there was something that said "Connection Timeout" when I opened the OpenVPN Connect. It was ok from the beginning after the configuration of the IT technician. After the brownout hit the area the QNAP shut down. When it is "ON" again, then I try to connect using my Laptop. That was the error pop-up. Your help is highly appreciated. Thank you.
The only thing I can think of is that it is no longer communicating with the network. It could be the unit rebooted and got a new IP address so your router may not know where you devices is for the port forward. I would start with that and make sure that the router port forward is the same as the IP you use to call up your web interface.
@@MikeFaucher thanks Mike, I will do that and let you know the results. thank you.
Should I be able to access my NAS after connecting via the local IP? I can connect via OpenVPN but not to the NAS.
Yes, you should be able to connect but will have to use the NAS IP.
How can you combine openvpn client and proxy server together? VPN has a ip of 10.8, but proxy doesn't
Can’t really offer much help on proxy server as I have never used it. Great question though. Thanks
Hi Mike, after disabling the "Use this connection as a default gateway for remote devices." option, I no longer able to access (ping) vpn side computer's IP, do you know why?
You cannot route to your internal network without going through the gateway. It will route your traffic out to the internet.
@@MikeFaucher Thanks for your swift reply, does it mean all vpn users using internet at home have to consume the vpn server side's bandwidth? Is it possible to isolate the traffic in client side, for example, only remote desktop connection using vpn but the rest via home internet gateway directly? Thanks.
Jacky Ng No it means that your VPN users hav access to the internet and local devices.
HI Mike, thats amazing, however we have issue with it, I dint want Open VPN to use default gateway for all traffic instead I want to use Split tunnel, however if I unselect check box for Deafult gateway on setting page it doesnt work ! any idea ...Thanks
Thank you. Make sure you download a new configuration after removing the gateway option. Things become a bit more complicated when you do not use the gateway and you have to create routing entries. If downloading a new config file does not work then modification will need to be done manually. I will have to test it out as I have not tried it and will do a video in the near future on it. Thanks for the feedback.
Спасибо за ваше видео
Great video. Thanks for sharing
Thanks for the feedback!
@@MikeFaucher is there any possibility to use the same vpn same time for two different qnap?
@@pedzamani6855 You can if they are separate ports and you use two different port forwarding rules. However, if they are on the same network, once you are in your LAN, you can access the other NAS and other items on your network.
Is there a way to assigned static open vpn ip to the connected clients? I can't figure it out..
Interesting question, not that I know of, at least not from a server reservation.
Hi Mike,
Great video thanks! My openvpn was working just fine ( I could connect from outside the wifi to my NAS) but all of a sudden it stopped working... I have followed all steps (port forwarding and everything included), but still i cant seem to connect to the VPN server.... I dont know what is wrong but my client times out after trying for 2 minutes to connect. I tried everything I could think of, is there anything that you can suggest met to do?
Thanks in advance!
Did you recently install QuFirewall?
@@MikeFaucher it was installed already... I added all the rules needed for openvpn.. But I think there was some kind of update for DNS. Now my DDNS ip adress is not static anymore and I am not able to change it back. According to qVPN everything seems to work, however my client is not able to connect anymore (i think since and due to this update, but not sure)
@@pascalnuijten7359 If something changed in the IP that would explain it. Try downloading and installing a new configuration to see if that helps, also double check the DDNS to make sure it is pointing to your public IP.
@@MikeFaucher thank you for your reply! I tried many times to download again the configuration file from openvpn and load it again in the client without success... The ddns is pointing to the right ip adress but according to my logs it is changing the ip adress every 30 minutes (due to myqnapcloud) and I am not able to set it to a static IP adress. Not sure how to fix this... The weird thing is that it used to work like one month ago
Hi Mike, I've been trying this unsuccessfully in Windows 10. I've set up Port Forwarding, but when once I select connect, it tries connecting but eventually says "Handshake Failed". Any troubleshooting connections?
The port forwarding has to be done in your router so the windows version should not matter. Can you verify that you setup OpenVPN with the default port in your QNAP and downloaded the configuration file? Also did you download and install OpenVPN software onto your computer and import the config file you downloaded from your QNAP? Assuming you did that part, then tell me what router you are using so I can help with the port forwarding.
Hi Mike, thanks for the response. In the end I was able to sort it out. I think I changed a setting after downloading the Config file, and so one of the settings was off. I downloaded it to try again and it fired up.
@@jefflavery1078 Awesome, glad to hear you got it working! Thanks for the update.
I am still searching for help setting up my router port forwarding. I am a newbie and have never done this for our company. I can follow most instructions if given properly, but I haven't a clue
Hi Kristi. I have an email on my channel about. page. Send the router type and a short description of the issue and if you can a screenshot of the QNAP VPN configuration screen and I try provide some guidance.
hello Mike , if i connect my mobile phone succesfullly through QVPN than means that anything i upload - download with Qfile , Qphoto etc will be through this secure tunnel??
Yep, that's correct. Thanks.
@@MikeFaucher thanks
Hi Mike is it possible to show the windows client connecting to the VPN to see the file structure once logged in
Yes, once you log in it is like being in front that of that PC. I can include it in the next update.
How do you access then your qnap interface? What ip should i put in?
I am not using it as getaway. Thanks
You can download the Qfinder Pro app from QNAP (www.qnap.com/en-us/utilities/essentials) to find out what your IP is. When you type in the IP you found make sure it has a :8080 after it. Another words XXX.XXX.XXX.XXX:8080
Ok once the open vpn client says connected now what? How do i access my files. On windows i dont see any networks to connect to. How do i map a drive? These are the questions people really want to knonw
Good question. There are many ways but I use the IP address of the device I want to access such as my NAS, Server, or PC. From the file explorer just typed \\192.168.xxx.xxx and you should be able to connect to the device. Instead of mapping drives, I add a quick access shortcut in my explorer so that I can go right to it in the future. Alternatively, you can run the DNS NAS wizard in QVPN on your NAS and that will walk you through it. That basically will link your device names to their IP so you do not have to remember IP address. Either way should work. As for mapping a drive, you certainly can by using the IP address if you prefer that way. As I have been using a VPN for almost 8 years I am usually comfortable with IP addresses and I find that to work for me. I will add this to my future video and cover both ways. Thanks for the question.
@@MikeFaucher Thank you. This helped a lot!
ScarfLess117 Great. Good luck.
Great Video! But now that I have it connected am I to assume that all of my internet traffic from my phone will go through my VPN? My second question is that I already have VPN service on my phone to keep my ISP or others from tapping into my data. Does this substitute that one? It appears it would route internet traffic back to my ISP again.
Good Morning Mike
Thank you very much for your professional video on how to set up OpenVPN. All worked fine and the OpenVPN connection works to my NAS work smart without any problems.
As long as I use the VPN connection, my device has no access to the Internet. You mentioned and explained that all traffic is routed through the VPN tunnel to the device. That seems quite logical and also correct for that kind of VPN connection.
How do I need to set up the configuration to assure that I am still able to surf via Browser the Internet to have access to my Office 365 Cloud at the same time using the OpenVPN connection (OpenVPN connection parallel to regular connection).
Now I can manage the situation and close when requiring Internet or Office 365 Cloud my OpenVPN connection to do my work on the Net and then reopen the OpenVPN connection.
I hope I was able to present my problem clearly and would be very happy with a corresponding video about my case or a personal answer. Thank you very much and have a great day. Hope to read you soon Greg.
The only thing you should have to do is make sure that the "USE THIS CONNECTION AS A DEFAULT GATEWAY FOR REMOTE USERS" is checked. That should route all traffic including internet through the device unless something like a firewall is blocking the device or that IP range. the alternative is to NOT check that box then your internet traffic will go through your locations internet and when you reach out to a device IP that is on the LAN OpenVPN will route to that as long as they are on different IP ranges which is the normal case. You do have to remember to download a ne configuration file if you make changes to the server screen. Let me know if that helped and we can go from there.
@@MikeFaucher
Hello Mike
Appreciate your immediate reply. Thanks.
I did as instructed 😊 and now I get connected to the NAS on 10.8.x.x.
Unfortunately, I am now stuck when entering \\10.8.x.x (the assigned IP address) into the Windows Explorer.
A Ping to the IP address works properly and 0% loss of packages. Bytes=32, Time
@@gregorspuhler4626 it really sounds like a permissions thing. If you can ping and can't connect, then it is either permission or QuFirewall blocking access. Make sure that you are logging in with the same account as set up in the QNAP. You might also try (temporarily for troubleshooting) logging with the admin account to help narrow the problem,
Any idea how you do this with OpenVPN Connect in windows 10?
Works great, I have an updated video coming out on the June 2.
Hello Mike, thank you for your video. I have some questions when dealing with this that wish to seek your professional advice.
I have a MacBook that I used to mount my QNAP NAS as the timemachine backup drive. I am going to move to another country that I wish to keep back up my Mac to the NAS in my hometown. I built an OpenVPN tunnel, it is successfully connected to the VPN on QNAP, but I am not able to search my NAS drive in QFinder. I also cannot access to my admin page. I also tried to build an OpenVPN account in the router, which supposedly is at the same level of subnet as my QNAP NAS. I also make sure that clients on the same level can be seen, but still, I can't search my NAS.
Is there anything I made a mistake during the process, and what would be your advices when need to setting up this setting? Thank you so much for your help in advance!
Thanks for the feedback Two things, first are you trying to access using the name or IP address? Most of the time you need to use the IP address Second is I would check the router port forwarding. Only one server can run, either the router or QNAP and the port forward should match the server you are using. Lastly, permissions. Much of what you describing is permission based. Make sure that the client you are using is for the admin. Typically when you connect, you should be able to pull up a browser, type in the IP address and log in with what ever accounts you have. Not sure if this helps.
@@MikeFaucher Thank you, Mike for your reply. I tried to access it via domain name. The port forwarding was opened; I managed to connect to the VPN at the router and connect to the VPN via port forwarding directly to the QNAP separately, using the OpenVPN protocol. So using QNAP or router as a VPN service, there is no problem. And when I am on a local network (without the VPN), I can also mount the drive on both Windows and Mac and access the NAS portal via browser.
However, I wish to connect my QNAP remotely only via VPN service, so I can securely access my drive. I want to open either the VPN service on the router, such that I can access my local network, or only open port forwarding at the router to QNAP VPN, such that I can access QNAP VPN and access the NAS, mounting drive on Windows or Mac. In both cases, I chose to use the OpenVPN protocol as it seems to be the most secure protocol currently available on my router (PPTP or OpenVPN) and QNAP NAS.
But in both cases, after I have successfully connected to the router or QNAP NAS via OpenVPN, I cannot search my local printer, nor can I mount the drive on Mac or Windows, nor can I access my NAS portal using 192.168.1.x.
Is that because OpenVPN uses the subnet 10.8.x.x, it is a separate network from the typical 192.168.x.x, so I cannot mount my drive? I have checked the function that allows clients to communicate with each other in my router VPN setting, yet I cannot search my printer or NAS. And it doesn’t seem to have any option on QNAP NAS to check if it can communicate with my printer or drives.
The VPN services have no problem when only using it to connect to the internet via QNAP. But what I wish to do is securely connect to my QNAP to mount as a network drive on Windows or Mac and connect to my printer remotely. Would you mind sharing some thoughts on this issue?
Thank you so much for your help in advance!
@@MikeFaucher Mike just I watch through all the video in your channel related to this. I figure it out is the QuFirewall Setting. I didn't allow the VPN traffic to go through. Now I'm good to go. Thank you so much for your valuable videos online!
In case there are some people wish to know the solution of this. It is at Mike's video 11:00 at th-cam.com/video/CydCrgw7TGM/w-d-xo.html
@@chriswong2012 This is very interesting. What type of Firewall are you using? I assume you did a port forward rule in your router/firewall? Can you access or ping any device at all? I have my email on the about page of my channel. Send me a snapshot of your firewall and OpenVPN configs and please block out any personal information before sending it. It could be the subnet issue but I have not seen this to be the case in most situations. Also, you have QuFirewall running? If so, you will have to add a rule that allows the IP range for OpenVPN.
Hi Mike, I've follow the steps but the updated version of QVPN doesn't provide the configuration file option. Anyway for me to trigger that? Thank you Mike
I have just done an update about the VPN for an upcoming security video using the latest and it is the same. Check to make sure you have configured users and all the settings.
@@MikeFaucher Hi Mike, have you uploaded it, because the latest video I saw is What is a VLan
@@raynlim Not yet. It should be going up in the next 1-2 weeks as I still have some editing to do. Thanks.
@@MikeFaucher Thank You Mike, I'll keep a lookout
I got hit with copyright other day. Will this setup block my router ip address or do I need to take additional steps?
You need a VPN provider, not OpenVPN. You need something like Express or NordVPN.
@@MikeFaucher Ok. Do you have video for that setup? I have ipvanish.
@@blkrazorback1970 No sorry I don’t but it is on the list of videos.
Note: OpenVPN is blocked in illiberal region slike the UAE. You will not be able to connect to your NAS.
Thanks. Great information to pass around.
iCloud or one drive etc are a better option to import files
In some cases such as frequently used files you are right. Accessing larger collections and accessing all your devices is where the VPN shines. Thanks for the feedback.
Fast forward to 2:50. You're welcome
Thank You!
I have express vpn . I don;t need it?
They actually are aimed at different use cases. OpenVPN is more for access to your local network as well as privacy. Express VPN is more to remove access to your local. Thanks.
@@MikeFaucher thanks, but if i need to access my qnap from internet, do i need both? or express vpn is enough to give me safe access?
Could we hire you to help us setup the port forwarding?
Thanks for the opportunity but unless you have a very complex system, it is probably not necessary. Send me some details about what you are trying to do (my email is on my channel about page) and possibly I could get you going in the right direction as I may see something missing.
Video is not actual anymore.The client part changed. Keep looking for more actual videos.
Which client is not available? I still use IOS and Windows Client everyday? Let me know which one. Thanks.